diff options
| author | Tomas Babej <tbabej@redhat.com> | 2014-06-24 13:58:28 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-06-25 15:01:52 +0200 |
| commit | 8f9838c7ef825fe102de82adf0e8f3409d562305 (patch) | |
| tree | 735fb919bf4171aebd505462b756ad77e5159c63 | |
| parent | 7b15fcd57b06482be36e95e50cbec596777955b4 (diff) | |
| download | freeipa-8f9838c7ef825fe102de82adf0e8f3409d562305.tar.gz freeipa-8f9838c7ef825fe102de82adf0e8f3409d562305.tar.xz freeipa-8f9838c7ef825fe102de82adf0e8f3409d562305.zip | |
trusts: Add more read attributes
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
| -rw-r--r-- | ACI.txt | 2 | ||||
| -rw-r--r-- | ipalib/plugins/trust.py | 3 |
2 files changed, 3 insertions, 2 deletions
@@ -213,7 +213,7 @@ aci: (targetattr = "cmdcategory || cn || description || externalhost || external dn: cn=System: Read Sudoers compat tree,cn=permissions,cn=pbac,dc=ipa,dc=example aci: (targetattr = "cn || description || objectclass || ou || sudocommand || sudohost || sudonotafter || sudonotbefore || sudooption || sudoorder || sudorunas || sudorunasgroup || sudorunasuser || sudouser")(target = "ldap:///ou=sudoers,dc=ipa,dc=example")(version 3.0;acl "permission:System: Read Sudoers compat tree";allow (compare,read,search) userdn = "ldap:///all";) dn: cn=System: Read Trust Information,cn=permissions,cn=pbac,dc=ipa,dc=example -aci: (targetattr = "cn || ipantflatname || ipantsecurityidentifier || ipanttrusteddomainsid || objectclass")(version 3.0;acl "permission:System: Read Trust Information";allow (compare,read,search) userdn = "ldap:///all";) +aci: (targetattr = "cn || ipantflatname || ipantsecurityidentifier || ipantsidblacklistincoming || ipantsidblacklistoutgoing || ipanttrusteddomainsid || ipanttrustpartner || objectclass")(version 3.0;acl "permission:System: Read Trust Information";allow (compare,read,search) userdn = "ldap:///all";) dn: cn=System: Add User to default group,cn=permissions,cn=pbac,dc=ipa,dc=example aci: (targetattr = "member")(target = "ldap:///cn=ipausers,cn=groups,cn=accounts,dc=ipa,dc=example")(version 3.0;acl "permission:System: Add User to default group";allow (write) groupdn = "ldap:///cn=System: Add User to default group,cn=permissions,cn=pbac,dc=ipa,dc=example";) dn: cn=System: Add Users,cn=permissions,cn=pbac,dc=ipa,dc=example diff --git a/ipalib/plugins/trust.py b/ipalib/plugins/trust.py index 987fb7476..25755d7a4 100644 --- a/ipalib/plugins/trust.py +++ b/ipalib/plugins/trust.py @@ -326,7 +326,8 @@ class trust(LDAPObject): 'ipapermdefaultattr': { 'cn', 'objectclass', 'ipantflatname', 'ipantsecurityidentifier', - 'ipanttrusteddomainsid', + 'ipanttrusteddomainsid', 'ipanttrustpartner', + 'ipantsidblacklistincoming', 'ipantsidblacklistoutgoing' }, }, } |